CVE-2024-2961

CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. root@kitploit: usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t...

HIDEAGEM

root@kitploit: 888 888 8888888 8888888b. 8888888888 d8888 .d8888b. 8888888888 888b d888 888 888 888 888 "Y88b 888 d88888 d88P Y88b 888 8888b d8888 888 888 888 888 888 888 d88P888 888 888 888 88888b.d88888 8888888888 888 888 888 8888888 d88P 888 888 8888888 888Y88888P888 888 888 888 888 888 888 d8...

CVE-2024-21413-POC

CVE-2024-21413 - POC Usage: python CVE-2024-21413.py -host example.com -port 25 -from [email protected] -recipient [email protected] -url xx.xx.xx.xx/path/to/shared/file/r0tb1t.rtf !NOTE r00tb1t : is the shared test file word in this case from the attacker machine xx.xx.xx.xx. To ensure...

CVE-2024-34144

CVE-2024-34144 PoC for CVE-2024-34144...

CVE-2024-7029-EXPLOIT

CVE-2024-7029-EXPLOIT...

CVE-2024-24919

CVE-2024-24919 Usage Usage: ./CVE-2024-24919.sh -i -p -f Specifying an IP with -i root@kitploit: ./CVE-2024-24919.sh -i 190.XXX.XXX.XXX Check multiples IP with -f root@kitploit: ./CVE-2024-24919.sh -f uniq.txt File example root@kitploit: 192.168.0.1 192.168.0.2 192.168.0.3 ... 192.168.0.20...

CVE-2024-24919

CVE-2024-24919 An Vulnerability detection and Exploitation tool for CVE-2024-24919 Installation: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Usage: root@kitploit: python3 exploit.py -h / / / / / / / / | |//...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

CVE-2024-24919

CVE-2024-24919 Quick and simple script that takes as input a file with multiple URLs to check for the CVE-2024-24919 vulnerability in CHECKPOINT. 3 Example input file: Demo Credits Gustavo Segundo - ByteNull%00...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument Injection in PHP-CGI Overview This repository contains scripts to check for the CVE-2024-4577 vulnerability, an argument injection issue in PHP-CGI. You can use the provided Bash, Go, and Python scripts to test a list of domains for this vulnerability. I've als...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable PoC Description Use this poc,you can bypass authentication and see system log USEAGE root@kitploit: sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port PORT...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC A Bash script to automate Local File Inclusion LFI attacks on vulnerable aiohttp servers, specifically targeting CVE-2024-23334. This exploit allows for unauthorized access to arbitrary files on systems running affected versions of aiohttp with improperly configured...

Moodle-authenticated-RCE

Moodle 4.4.0 - Authenticated Remote Code Execution CVE-2024-43425 Exploit CVE: CVE-2024-43425 Affected Versions Moodle 4.4 to 4.4.1 Moodle 4.3 to 4.3.5 Moodle 4.2 to 4.2.8 Moodle 4.1 to 4.1.11 Description This exploit targets an authenticated Remote Code Execution RCE vulnerability in Moodle...

CVE-2024-26229-exploit

CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...

CVE-2024-38063

This repository does not have a README...

day03-jenkins-23897

Day 3 — Jenkins CLI arbitrary file read CVE-2024-23897 Idea: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expands @/path inside CLI args. Unauthenticated users can make Jenkins read local files and reflect their first lines via the CLI help output. Fixed in 2.442 / 2.426.3. Build → Run root@kitploit: 1 Build...

CVE-2024-9264

CVE-2024-9264 References https://github.com/vulhub/vulhub/tree/master/grafana/CVE-2024-9264 1. Vulnerability Summary...

ThisSeemsWrong

Fix for this issue appeared as CVE-2024-49746: bulletin, patch "This seems wrong" Above title is the comment from Parcel::continueWrite method, which is actually responsible for resizing Parcel objects, either when explicitly request by user for example through setDataSize or when calling one of...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper Overview CVE-2024-24919 Sniper is a Python script designed to scan for Check Point Security Gateway Information Disclosure vulnerabilities. This script can perform both single-target and bulk scanning, utilizing multithreading to improve scanning speed. It supports various...